How is LDAP supposed to work?

mnahmias

So what I want to be able to do is have users be able to log in to the ticket system with their current AD credentials. I thought that this was what the plugin was supposed to accomplish, but it doesn't seem like it so far. Is there any way to allow someone who is in AD to just go to the ticket system and log in for the first time with their AD credentials? It would be preferable if they didn't have to register.

mnahmias

I was taking a look at Chefkeks's guide here, if I go through all of those steps will that give me the configuration I'm looking for?

ntozier

Q: Is there any way to allow someone who is in AD to just go to the ticket

system and log in for the first time with their AD credentials?A: Yes, but you have to import them.Q: if I go through all of those steps will that give me the configuration I'm looking for?A: No idea, I've never tried following his instructions. Other people seem to have had luck with it though.

mnahmias

Any idea how I could import them?

ntozier

Staff panel -> Users -> Import

mnahmias

Thanks for your help so far, but it didn't work. I manually added two differfent users that are in AD and tried to log in as them, but I got Access Denied for both. Thoughts?

ntozier

Does staff account auth working against AD?If no, then chances are something is setup wrong in the config.If yes, go to the plugin (Admin panel -> Manage -> Plugin -> LDAP) and scroll all the way to the bottom. Is "Client Authentication" checked?Addendum: I should probably note that I just setup a "user" auth against LD account in one of my installations and it works fine.

mnahmias

Nope. I tried the same account as a user and as a staff member, neither of which worked.I've been working on this with the network/database admin so I'm 99% sure that the settings are correct. Yes, staff and client authentication are checked.

mnahmias

When I go to add a staff member and I type in their username as it is in AD, a dropdown menu pops up and when I click it, it fills in their info. So the connection with AD seems to be there, but for some reason the logins don't work.

ntozier

Did you enable the ldap plugin after you installed and configured it?Admin panel -> Manage -> pluginstick the check box to the left of LDAP.click Enable button

mnahmias

Yes sir, I even tried downloading and enabling the HTTP Passthru Authentication plugin but that didn't help either.

ntozier

Then I have no idea.If its configured correctly and enabled, you've added users, then it should work. It works for my staff just fine. It works on the test accounts that I setup to test with it when you reported the problem. I can only conclude at this point that you have misconfigured something, or that there is something specific with your system that is preventing it from working. I guess that you could check event viewer ... or your firewall logs.